Privacy Policy

1. Scope

VLOWBAI provides crowd visibility for visitors and occupancy monitoring tools for store owners. This policy explains what data we collect, why we use it, and what controls you have.

2. Information We Collect

• Account details such as name, email address, role, and verified phone number when owner verification is required.
• Store data such as store name, address, capacity, operating hours, store photo, and alert settings.
• Operational analytics such as occupancy, entries, exits, support history, and limited audit records.
• Location data only when you allow it for map and nearby-store features.
• Optional analytics data only after you grant the relevant consent setting.
• AI assistant prompts and the minimum context required to answer them.

3. How We Use Information

• Authenticate users and protect owner and admin access.
• Show live crowd levels, alerts, maps, and store insights.
• Review and respond to access requests submitted through the website.
• Provide support, investigate abuse, and respond to security incidents.
• Improve reliability, performance, and feature quality.

4. Service Providers

We rely on trusted cloud infrastructure providers to run authentication, data storage, maps, and AI-powered insights. These providers process data only on our behalf and under our instructions. We do not sell your data to anyone.

5. Sensor and AI Processing

VLOWBAI uses non-camera sensor signals to generate occupancy and flow metrics. We do not use camera feeds, video, or facial recognition for production counting. We store configuration data and summarized metrics, and private store data is restricted to the owner, authorized admins, or approved server processes.

6. Retention

We keep account and store records while the account is active. Support and security records may be retained for compliance, fraud prevention, dispute handling, and service continuity. When you delete your account, we delete or detach associated user data and owned-store records unless a longer retention period is legally required.

7. Your Choices

• Update profile, owner, and alert settings inside the app.
• Revoke location access through your browser or device settings.
• Decline optional analytics through the consent controls.
• Delete your account from the profile screen.

8. Security

We use authenticated access controls, Firebase security rules, server-side authorization checks, owner phone verification, and environment-based secret management. No system is perfectly secure, so you should also protect your own devices and credentials.